fix: kuttl tests for force-failure-policy-ignore config (#6840)

* fix: kuttl tests for force-failure-policy-ignore config

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

* fix

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

---------

Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>

test/conformance/kuttl/force-failure-policy-ignore/cluster-policy/fail/policy-assert.yaml

@@ -7,3 +7,13 @@ status:
     - reason: Succeeded
       status: "True"
       type: Ready
+---
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: add-labels
+status:
+  conditions:
+    - reason: Succeeded
+      status: "True"
+      type: Ready

test/conformance/kuttl/force-failure-policy-ignore/cluster-policy/fail/policy.yaml

@@ -21,3 +21,27 @@ spec:
           metadata:
             labels:
               team: '?*'
+---
+apiVersion: kyverno.io/v1
+kind: ClusterPolicy
+metadata:
+  name: add-labels
+spec:
+  failurePolicy: Fail
+  validationFailureAction: Enforce
+  background: false
+  rules:
+  - name: add-labels
+    match:
+      any:
+      - resources:
+          kinds:
+          - Pod
+          - Service
+          - ConfigMap
+          - Secret
+    mutate:
+      patchStrategicMerge:
+        metadata:
+          labels:
+            foo: bar

test/conformance/kuttl/force-failure-policy-ignore/cluster-policy/fail/webhooks-assert.yaml

@@ -5,6 +5,26 @@ metadata:
     webhook.kyverno.io/managed-by: kyverno
   name: kyverno-resource-validating-webhook-cfg
 webhooks:
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: kyverno-svc
+      namespace: kyverno
+      path: /validate/ignore
+      port: 443
+  failurePolicy: Ignore
+  matchPolicy: Equivalent
+  name: validate.kyverno.svc-ignore
+  sideEffects: NoneOnDryRun
+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: MutatingWebhookConfiguration
+metadata:
+  labels:
+    webhook.kyverno.io/managed-by: kyverno
+  name: kyverno-resource-mutating-webhook-cfg
+webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
@@ -16,18 +36,4 @@ webhooks:
   failurePolicy: Ignore
   matchPolicy: Equivalent
   name: mutate.kyverno.svc-ignore
-  rules:
-  - apiGroups:
-    - ""
-    apiVersions:
-    - v1
-    operations:
-    - CREATE
-    - UPDATE
-    - DELETE
-    - CONNECT
-    resources:
-    - pods
-    - pods/ephemeralcontainers
-    scope: '*'
   sideEffects: NoneOnDryRun